Steam Community Inventory

• Analyzed: May 12, 2026, 3:38 AM
• Findings: 1
• Version: 1.0.1
• Hash: 86e2a8abe271516988f53e1b21c1a3e9560fd23c81921fac898882d218db8301
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to retrieve Steam inventory data using `curl` and `jq`. It requires `STEAM_ID` and `STEAM_COOKIES` as environment variables, which are used to authenticate requests to the legitimate `steamcommunity.com` API. There is no evidence of data exfiltration to unauthorized endpoints, malicious execution, persistence mechanisms, or prompt injection attempts to subvert the agent's core function. All actions described in SKILL.md are directly aligned with its stated purpose.